OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.528

164.528(c)(1)(ii)

paragraph (action item)

If the covered entity is unable to provide the accounting within the time required by paragraph (c)(1) of this section, the covered entity may extend the time to provide the accounting by no more than 30 days, provided that:

164.528 Accounting of disclosures of protected health information.

Related Frameworks

1 mapping across 3 frameworks
SCF1 mapping
PRI-14.1Accounting of Disclosures
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (32) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CM-1Policy and Procedures
1.00
CP-1Policy and Procedures
1.00
IA-1Policy and Procedures
1.00
IR-1Policy and Procedures
1.00
IR-4Incident Handling
1.00
IR-6Incident Reporting
1.00

+22 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (8) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-004404
1.00
CCI-004405
1.00
CCI-004406
1.00
CCI-004407
1.00
CCI-004408
1.00
CCI-004409
1.00
CCI-004410
1.00
CCI-004411
1.00

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.